From e05cb47c7054e3ae005187a675a5db2c841b41c1 Mon Sep 17 00:00:00 2001 From: Jagadisha V Date: Tue, 7 Jul 2026 14:18:58 +0530 Subject: [PATCH 1/2] DOCS-1724 - Document Monitor Creation Agent in Mobot Add a new Create Monitors with Mobot page under Monitors, register the Monitor Creation Agent as a third agent in the Mobot page, wire the sidebar and a cross-link from create-monitor, and add a service release note. Co-Authored-By: Claude Opus 4.8 (1M context) --- blog-service/2026-07-10-search.md | 12 +++ .../monitors/create-monitor-with-mobot.md | 74 +++++++++++++++++++ docs/alerts/monitors/create-monitor.md | 4 + docs/search/mobot.md | 31 +++++--- sidebars.ts | 1 + 5 files changed, 112 insertions(+), 10 deletions(-) create mode 100644 blog-service/2026-07-10-search.md create mode 100644 docs/alerts/monitors/create-monitor-with-mobot.md diff --git a/blog-service/2026-07-10-search.md b/blog-service/2026-07-10-search.md new file mode 100644 index 00000000000..e9df8019152 --- /dev/null +++ b/blog-service/2026-07-10-search.md @@ -0,0 +1,12 @@ +--- +title: Create Monitors with Mobot (Search) +image: https://assets-www.sumologic.com/company-logos/_800x418_crop_center-center_82_none/SumoLogic_Preview_600x600.jpg?mtime=1617040082 +keywords: + - mobot + - monitor + - dojo ai + - agent +hide_table_of_contents: true +--- + +We're excited to introduce the **Monitor Creation Agent** in Mobot, which lets you create and update logs monitors from plain-language prompts instead of filling out the monitor form. Describe the monitor you want, review the suggested configuration, and confirm to create it. [Learn more](/docs/alerts/monitors/create-monitor-with-mobot). diff --git a/docs/alerts/monitors/create-monitor-with-mobot.md b/docs/alerts/monitors/create-monitor-with-mobot.md new file mode 100644 index 00000000000..84bd3d70c23 --- /dev/null +++ b/docs/alerts/monitors/create-monitor-with-mobot.md @@ -0,0 +1,74 @@ +--- +id: create-monitor-with-mobot +title: Create Monitors with Mobot +sidebar_label: Create Monitors with Mobot +description: Use the Monitor Creation Agent in Mobot to create and update logs monitors from plain-language prompts, without filling out the monitor form manually. +keywords: + - mobot + - monitor + - dojo ai + - agent + - monitor creation agent +--- + +import useBaseUrl from '@docusaurus/useBaseUrl'; + +The **Monitor Creation Agent** lets you create monitors from plain-language prompts in [Mobot](/docs/search/mobot), Sumo Logic's conversational AI assistant. Describe the monitor you want in everyday language, and the agent validates your query, suggests a complete configuration, and creates the monitor after you confirm. You can also update a monitor within the same conversation. + +## Supported monitor types + +The Monitor Creation Agent supports logs monitors only. + +| Monitor type | Supported | +| :-- | :-- | +| Logs | Yes | +| Metrics | No | +| SLO | No | + +For logs monitors, the agent can create the following detection types: + +- **Static**. Trigger when results cross a threshold you define. +- **Anomaly**. Trigger on deviations from a machine learning baseline. +- **Outlier**. Trigger when values fall outside the expected range for your logs. + +## What the agent can configure + +From your prompt, the agent suggests values for the following, and you can accept each suggestion or provide your own: + +- **Name** and **description**. +- **Query** (validated before the configuration is suggested). +- **Trigger conditions and thresholds**. +- **Recovery conditions**. +- **Notifications** through email or a connection. + +## Create a monitor + +1. Open [Mobot](/docs/search/mobot) and select the **Monitor Creation Agent**.
{/* TODO: add screenshot of Monitor Creation Agent selected in Mobot */} +1. Describe the monitor you want in plain language. For example:
`Alert me when the payment-service query has more than 20 errors in a 5-minute window.` +1. The agent validates your query and suggests a configuration, including name, description, monitor type, query, trigger, recovery, and notifications.
{/* TODO: add screenshot of the suggested configuration card */} +1. Review each suggestion. To change a value, tell the agent what you want. For example, ask it to rename the monitor or adjust the trigger threshold. +1. (Optional) Add a notification. You can be notified by email or through a connection, such as Slack. + - If your organization has one connection, the agent adds it automatically. + - If your organization has more than one connection, the agent lists them and asks which to use. +1. When the configuration looks right, the agent shows a confirmation card. Confirm to create the monitor.
{/* TODO: add screenshot of the confirmation card */} +1. The agent creates the monitor and returns its ID along with the configured conditions. + +The new monitor appears on the **Monitors** tab, the same as a monitor created through the form. + +## Update a monitor in the conversation + +You can update a monitor you created earlier in the same conversation. Tell the agent what to change, and it shows a confirmation card summarizing the update before applying it. + +For example, ask the agent to change the trigger threshold from 20 to 15 and the time window to 7 minutes. The agent confirms that the threshold will change from 20 to 15 and the window will change to 7 minutes, and applies the update after you confirm. + +## Example prompts + +- `Alert me when the payment-service query has more than 20 errors in a 5-minute window.` +- `Create a monitor that notifies me by email when login failures exceed 100 in 10 minutes.` +- `Notify my Slack channel when 5xx responses spike above the normal range.` + +## Related resources + +- [Mobot](/docs/search/mobot) +- [Create a New Monitor](/docs/alerts/monitors/create-monitor) +- [AI and Machine Learning with Sumo Logic](/docs/get-started/ai-machine-learning) diff --git a/docs/alerts/monitors/create-monitor.md b/docs/alerts/monitors/create-monitor.md index c61ce5c610f..4e6cd72e79f 100644 --- a/docs/alerts/monitors/create-monitor.md +++ b/docs/alerts/monitors/create-monitor.md @@ -21,6 +21,10 @@ You can use Terraform to manage monitors with the [`sumologic_monitor`](https:// ::: +:::tip +You can also create logs monitors from plain-language prompts with the Monitor Creation Agent in Mobot. For details, see [Create Monitors with Mobot](/docs/alerts/monitors/create-monitor-with-mobot). +::: + ## Open the New Monitor window There are several ways to create a new monitor, depending on where you are in Sumo Logic. diff --git a/docs/search/mobot.md b/docs/search/mobot.md index 45944d10922..417401374eb 100644 --- a/docs/search/mobot.md +++ b/docs/search/mobot.md @@ -16,18 +16,19 @@ import useBaseUrl from '@docusaurus/useBaseUrl'; Mobot is Sumo Logic's AI assistant that turns plain-language questions into log queries. Ask what you want to investigate and get query results, visualizations, and guided refinements in one conversational experience—without writing queries from scratch. Mobot tracks your intent, maintains conversation context, and surfaces step-by-step suggestions to move you from question to insight faster. -Mobot connects you to two specialized agents: +Mobot connects you to three specialized agents: * **Query Agent** translates your natural-language questions into log search queries and helps you refine them step by step. * **Knowledge Agent** answers how-to questions about Sumo Logic, from setup to troubleshooting, best practices, and more. +* **Monitor Creation Agent** creates and updates logs monitors from plain-language prompts, so you do not have to fill out the monitor form manually. Together, these agents help you troubleshoot faster, explore your data more intuitively, and learn the platform without friction. ## At a glance - **What it is**: Sumo Logic's AI-powered assistant for log investigation and platform guidance. -- **Two agents**: Query Agent (log search queries) and Knowledge Agent (how-to answers from official docs). -- **How it works**: Ask questions in plain English; Mobot translates them into Sumo Logic queries or returns documentation-sourced answers. +- **Three agents**: Query Agent (log search queries), Knowledge Agent (how-to answers from official docs), and Monitor Creation Agent (create logs monitors from prompts). +- **How it works**: Ask questions in plain English; Mobot translates them into Sumo Logic queries, returns documentation-sourced answers, or builds a monitor configuration for you. - **Response time**: Typically under 2 seconds for most queries. - **Compatible log types**: JSON, partial JSON, and unstructured logs with Field Extraction Rules. - **AI provider**: Amazon Bedrock (no customer data used for training). @@ -68,13 +69,13 @@ There are two ways to open Mobot: Not sure where to start? Choose an agent based on what you need: -| | Query Agent | Knowledge Agent | -|:-----|:------------|:----------------| -| **Purpose** | Create and refine log queries | Learn platform features | -| **Input** | Data questions and analysis requests | How-to and configuration questions | -| **Output** | Executable queries with live results | Answers with guidance links | -| **Best for** | Troubleshooting, investigating, analyzing trends | Onboarding, setup guidance, learning concepts | -| **Example** | "Show me 500 errors from the API service" | "How do I set up a CloudTrail collector?" | +| | Query Agent | Knowledge Agent | Monitor Creation Agent | +|:-----|:------------|:----------------|:-----------------------| +| **Purpose** | Create and refine log queries | Learn platform features | Create and update logs monitors | +| **Input** | Data questions and analysis requests | How-to and configuration questions | A description of the monitor you want | +| **Output** | Executable queries with live results | Answers with guidance links | A monitor configuration you confirm and create | +| **Best for** | Troubleshooting, investigating, analyzing trends | Onboarding, setup guidance, learning concepts | Setting up alerting without the monitor form | +| **Example** | "Show me 500 errors from the API service" | "How do I set up a CloudTrail collector?" | "Alert me when the payment-service query has more than 20 errors in 5 minutes" | ## Query Agent @@ -451,6 +452,16 @@ To get the most accurate answers, try the following when asking questions: * **Follow up naturally**. If the initial answer is close but not quite right, ask follow-up questions like "What about for Azure instead of AWS?" * **Reference specific features**. Use proper names when you know them: "How do I use Field Extraction Rules?" works better than "How do I extract fields?" +## Monitor Creation Agent + +Select **Monitor Creation Agent** to create monitors from plain-language prompts. Describe the monitor you want, and the agent validates your query and suggests a complete configuration, including name, description, monitor type, query, trigger, recovery, and notifications. You review the suggestions, make any changes, and confirm to create the monitor. You can also update a monitor within the same conversation. + +The agent supports logs monitors only (not metrics or SLO monitors), and can create static, anomaly, and outlier detection types. + +For example, you can prompt: `Alert me when the payment-service query has more than 20 errors in a 5-minute window.` + +For the full walkthrough, including how to update a monitor in the conversation and more example prompts, see [Create Monitors with Mobot](/docs/alerts/monitors/create-monitor-with-mobot). + ## How does Mobot handle security and compliance? Sumo Logic Mobot leverages foundational models provided by Amazon Bedrock, inheriting their robust compliance and security posture. For detailed information, refer to the following Amazon Bedrock security and compliance resources: diff --git a/sidebars.ts b/sidebars.ts index 2ba97200e41..7a5b1caa23b 100644 --- a/sidebars.ts +++ b/sidebars.ts @@ -1231,6 +1231,7 @@ module.exports = { items: [ 'alerts/monitors/overview', 'alerts/monitors/create-monitor', + 'alerts/monitors/create-monitor-with-mobot', 'alerts/monitors/settings', 'alerts/monitors/monitor-faq', 'alerts/monitors/alert-variables', From 2c258235162ca632218ce746fcedd41c72ae4326 Mon Sep 17 00:00:00 2001 From: Jagadisha V Date: Wed, 8 Jul 2026 12:05:19 +0530 Subject: [PATCH 2/2] DOCS-1724 - Apply GEO improvements and address review feedback GEO: add at-a-glance intro, question/how-to headings, and an FAQ. Review fixes: document the post-creation chip, scope updatable fields (name, description, query, triggers, notifications, query time range), and note the agent cannot disable or delete a monitor. Co-Authored-By: Claude Opus 4.8 (1M context) --- .../monitors/create-monitor-with-mobot.md | 45 +++++++++++++++++-- 1 file changed, 41 insertions(+), 4 deletions(-) diff --git a/docs/alerts/monitors/create-monitor-with-mobot.md b/docs/alerts/monitors/create-monitor-with-mobot.md index 84bd3d70c23..276fbe823bf 100644 --- a/docs/alerts/monitors/create-monitor-with-mobot.md +++ b/docs/alerts/monitors/create-monitor-with-mobot.md @@ -15,7 +15,9 @@ import useBaseUrl from '@docusaurus/useBaseUrl'; The **Monitor Creation Agent** lets you create monitors from plain-language prompts in [Mobot](/docs/search/mobot), Sumo Logic's conversational AI assistant. Describe the monitor you want in everyday language, and the agent validates your query, suggests a complete configuration, and creates the monitor after you confirm. You can also update a monitor within the same conversation. -## Supported monitor types +The agent supports logs monitors only, not metrics or SLO (Service Level Objective) monitors, and can create static, anomaly, and outlier detection types. From a single prompt, it populates the monitor name, description, query, trigger conditions, recovery conditions, and notifications, and you can accept or adjust each suggestion before the monitor is created. + +## Which monitor types does the agent support? The Monitor Creation Agent supports logs monitors only. @@ -41,7 +43,7 @@ From your prompt, the agent suggests values for the following, and you can accep - **Recovery conditions**. - **Notifications** through email or a connection. -## Create a monitor +## How to create a monitor with Mobot 1. Open [Mobot](/docs/search/mobot) and select the **Monitor Creation Agent**.
{/* TODO: add screenshot of Monitor Creation Agent selected in Mobot */} 1. Describe the monitor you want in plain language. For example:
`Alert me when the payment-service query has more than 20 errors in a 5-minute window.` @@ -51,22 +53,57 @@ From your prompt, the agent suggests values for the following, and you can accep - If your organization has one connection, the agent adds it automatically. - If your organization has more than one connection, the agent lists them and asks which to use. 1. When the configuration looks right, the agent shows a confirmation card. Confirm to create the monitor.
{/* TODO: add screenshot of the confirmation card */} -1. The agent creates the monitor and returns its ID along with the configured conditions. +1. The agent creates the monitor and returns its ID along with the configured conditions. Mobot also displays a chip for the new monitor. Click the chip to open the created monitor. The new monitor appears on the **Monitors** tab, the same as a monitor created through the form. -## Update a monitor in the conversation +## How to update a monitor in a conversation You can update a monitor you created earlier in the same conversation. Tell the agent what to change, and it shows a confirmation card summarizing the update before applying it. +The agent can only update the following fields: + +- Name +- Description +- Query +- Trigger conditions +- Notifications +- Query time range + For example, ask the agent to change the trigger threshold from 20 to 15 and the time window to 7 minutes. The agent confirms that the threshold will change from 20 to 15 and the window will change to 7 minutes, and applies the update after you confirm. +:::note +The agent cannot disable or delete a monitor. To disable or delete a monitor, use the **Monitors** tab. +::: + ## Example prompts - `Alert me when the payment-service query has more than 20 errors in a 5-minute window.` - `Create a monitor that notifies me by email when login failures exceed 100 in 10 minutes.` - `Notify my Slack channel when 5xx responses spike above the normal range.` +## Frequently asked questions + +### Can the Monitor Creation Agent create metrics or SLO monitors? + +No. The agent creates logs monitors only. Use the monitor form to create metrics or SLO monitors. + +### What detection types can the agent create? + +The agent can create static, anomaly, and outlier detection types for logs monitors. + +### Can you edit a monitor after the agent creates it? + +Yes. You can update a monitor within the same conversation, or edit it later from the **Monitors** tab like any other monitor. + +### Does the agent validate your query before creating the monitor? + +Yes. The agent validates your query first, and then suggests the rest of the configuration, including name, description, trigger, recovery, and notifications. + +### How does the agent set up notifications? + +You can be notified by email or through a connection, such as Slack. If your organization has one connection, the agent adds it automatically. If you have more than one, the agent lists them and asks which to use. + ## Related resources - [Mobot](/docs/search/mobot)